$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/ABD84FB00F8A11EF943CC917C4F9AE02.roa File: ABD84FB00F8A11EF943CC917C4F9AE02.roa (raw, json) Hash identifier: mAjzpgSn4LjU+hGR/suY8fIT9L0ResXkBxM/GBV6W9Y= Subject key identifier: 39:0E:21:12:57:F2:69:E0:CC:65:61:D2:23:91:16:26:0F:5B:E7:43 Certificate issuer: /CN=A91B74D6/serialNumber=77464A846F77D1C4D366A306B806939FCF2A601A Certificate serial: 0112 Authority key identifier: 77:46:4A:84:6F:77:D1:C4:D3:66:A3:06:B8:06:93:9F:CF:2A:60:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/ABD84FB00F8A11EF943CC917C4F9AE02.roa Signing time: Wed 01 Oct 2025 06:01:19 +0000 ROA not before: Wed 01 Oct 2025 06:01:19 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 24298 IP address blocks: 103.123.144.0/22 maxlen: 24 202.60.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.crl rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B74D6, serialNumber=77464A846F77D1C4D366A306B806939FCF2A601A Validity Not Before: Oct 1 06:01:19 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68dcc3ae-e135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:39:78:c0:5a:e7:af:fd:97:17:3a:e0:8e:d4: 76:9f:86:79:ef:45:ef:20:c7:5b:2d:b5:1b:c6:b6: da:a4:36:98:0a:e9:1a:75:0b:26:38:59:26:a4:f0: a8:89:08:0c:66:84:ad:69:56:84:90:52:5b:3d:cf: 13:26:a6:34:58:0e:50:ce:48:eb:19:e6:3f:8c:e9: 6d:ee:8d:94:58:fc:54:76:a9:cc:26:50:51:dd:2d: 33:44:19:c6:2f:4f:c3:22:c9:c1:cc:a9:13:9b:ab: 07:f5:f8:ad:14:08:a9:52:c2:5e:03:f9:1d:0a:ad: 0a:46:76:34:fe:2b:cb:cf:66:4e:b4:41:4d:ea:03: af:d5:29:df:1a:35:b9:4f:38:04:3f:ae:69:a8:28: 95:09:cf:ce:13:05:39:db:d3:ee:42:1a:b9:5e:63: c9:2f:f1:c6:7c:64:eb:83:a9:26:1a:18:44:57:67: 7f:f8:a2:3e:17:ed:65:b3:2b:e7:55:f5:3d:23:1d: 8c:8b:95:b3:15:f7:0e:b8:8d:f7:43:40:de:2a:da: 05:e3:e1:e0:06:e9:20:00:cc:95:06:57:cc:e9:75: 87:7a:0e:90:3f:2a:1d:cb:c5:2f:52:08:0c:a8:82: 8e:ad:03:91:d0:57:cc:49:9a:c2:49:7f:6d:0f:9f: 70:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0E:21:12:57:F2:69:E0:CC:65:61:D2:23:91:16:26:0F:5B:E7:43 X509v3 Authority Key Identifier: keyid:77:46:4A:84:6F:77:D1:C4:D3:66:A3:06:B8:06:93:9F:CF:2A:60:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/ABD84FB00F8A11EF943CC917C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.144.0/22 202.60.8.0/21 Signature Algorithm: sha256WithRSAEncryption 40:f0:ce:34:c8:d8:3c:80:d5:7d:c6:88:00:bb:29:c8:68:76: a4:60:8a:f0:18:8d:83:80:9d:63:3f:f4:9d:71:45:d6:c7:9f: ee:05:35:77:89:62:d1:a7:e8:e0:c0:12:9d:93:3b:ca:ef:6d: 2f:0a:04:86:80:6a:be:c4:08:89:df:f8:8e:5f:0a:a7:f1:d7: 05:6c:49:50:ee:c4:d2:3f:7f:1e:c3:b0:70:eb:11:48:03:54: ff:eb:af:4c:df:96:de:1f:e7:b3:a0:b0:ca:68:cf:c5:5b:33: 8a:77:fc:6e:59:d8:53:f6:2e:e1:24:4c:e7:50:4c:c8:1d:cd: c9:e3:98:34:d6:3f:ec:70:4b:20:ab:23:6e:03:92:37:7b:0b: 1f:f1:02:d1:b5:99:ab:aa:d0:5c:21:0b:f6:f9:c0:bb:01:de: f8:dd:d7:f3:09:81:8e:7d:29:4c:29:a8:a9:28:be:74:56:8e: 2a:e5:21:be:b2:8c:29:13:42:68:1a:02:c4:df:81:f3:29:be: 60:88:9a:7f:bd:bd:4b:e3:e4:da:3d:e9:79:60:3e:c6:19:fd: 34:a2:27:b1:64:14:83:c3:a0:28:ba:96:1e:46:44:15:d6:b4: b8:5a:2b:0f:e0:e0:75:33:35:d6:af:dd:ba:3b:da:47:49:63: ce:5c:f2:83 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc0RDYxMTAvBgNVBAUTKDc3NDY0QTg0NkY3N0QxQzREMzY2QTMwNkI4MDY5MzlG Q0YyQTYwMUEwHhcNMjUxMDAxMDYwMTE5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjYzNhZS1lMTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszl4wFrnr/2XFzrgjtR2n4Z570XvIMdbLbUbxrbapDaYCukadQsmOFkmpPCo iQgMZoStaVaEkFJbPc8TJqY0WA5QzkjrGeY/jOlt7o2UWPxUdqnMJlBR3S0zRBnG L0/DIsnBzKkTm6sH9fitFAipUsJeA/kdCq0KRnY0/ivLz2ZOtEFN6gOv1SnfGjW5 TzgEP65pqCiVCc/OEwU529PuQhq5XmPJL/HGfGTrg6kmGhhEV2d/+KI+F+1lsyvn VfU9Ix2Mi5WzFfcOuI33Q0DeKtoF4+HgBukgAMyVBlfM6XWHeg6QPyody8UvUggM qIKOrQOR0FfMSZrCSX9tD59wuwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDkOIRJX 8mngzGVh0iORFiYPW+dDMB8GA1UdIwQYMBaAFHdGSoRvd9HE02ajBrgGk5/PKmAa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzRENi9ERTIyQUQyNDBD REYxMUVGOTQ4NEU2MkFDNEY5QUUwMi9kMFpLaEc5MzBjVFRacU1HdUFhVG44OHFZ Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwWktoRzkzMGNUVFpxTUd1QWFUbjg4cVlCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjc0RDYvREUyMkFEMjQwQ0RGMTFFRjk0ODRFNjJBQzRGOUFFMDIvQUJEODRGQjAw RjhBMTFFRjk0M0NDOTE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJne5ADBAPKPAgwDQYJKoZIhvcNAQELBQADggEBAEDwzjTI 2DyA1X3GiAC7KchodqRgivAYjYOAnWM/9J1xRdbHn+4FNXeJYtGn6ODAEp2TO8rv bS8KBIaAar7ECInf+I5fCqfx1wVsSVDuxNI/fx7DsHDrEUgDVP/rr0zflt4f57Og sMpoz8VbM4p3/G5Z2FP2LuEkTOdQTMgdzcnjmDTWP+xwSyCrI24Dkjd7Cx/xAtG1 mauq0FwhC/b5wLsB3vjd1/MJgY59KUwpqKkovnRWjirlIb6yjCkTQmgaAsTfgfMp vmCImn+9vUvj5No96XlgPsYZ/TSiJ7FkFIPDoCi6lh5GRBXWtLhaKw/g4HUzNdav 3bo72kdJY85c8oM= -----END CERTIFICATE-----Generated at Mon Oct 20 05:38:59 2025 by rpki-client